wren 33255e823f fix: enforce fine-grained rbac permissions on role CRUD endpoints ...

Add _assertPermission() that checks role_permissions table for
specific permission keys (super_admin bypasses). Wire it into
CreateRole (rbac:roles:create), UpdateRole (rbac:roles:update),
and DeleteRole (rbac:roles:delete). Previously only the coarse
can_manage role check was enforced, making the permission grants
in role_permissions purely cosmetic for these endpoints.

2026-04-30 10:36:38 +08:00

..

fastapi_leaudit

fix: enforce fine-grained rbac permissions on role CRUD endpoints

2026-04-30 10:36:38 +08:00

__init__.py

chore: initial commit — leaudit-platform project skeleton

2026-04-27 16:48:22 +08:00